Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
File:                     dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft (raw, json)
Hash identifier:          okQLvTJ4TAnLqMat7AES6mNbIMvHuYeQCn32COIftkE=
Subject key identifier:   94:78:CE:05:87:88:54:EB:21:5C:43:08:6B:86:65:A5:53:9E:0C:D4
Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
Certificate issuer:       /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Certificate serial:       0549
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
Manifest number:          0546
Signing time:             Sun 19 May 2024 00:53:36 +0000
Manifest this update:     Sun 19 May 2024 00:53:35 +0000
Manifest next update:     Sun 26 May 2024 00:53:35 +0000
Files and hashes:         1: dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl (hash: M5S2ycUYucY65g8dkwzVoT47KTrHsvQGRn94AfzE5F0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl
                          rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
        Validity
            Not Before: May 19 00:53:35 2024 GMT
            Not After : May 26 00:53:35 2024 GMT
        Subject: CN=66494d8f-e0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:10:3c:0e:2b:df:58:4c:bd:3b:cf:3c:39:ed:
                    88:a1:4d:7f:38:c1:a0:0d:8c:ec:6b:f1:c9:93:06:
                    e4:7c:b3:c5:a0:59:8f:16:e4:de:3f:2a:3f:b4:37:
                    ba:7a:99:5e:33:d9:28:2d:9b:3a:c0:da:17:d6:eb:
                    27:74:b0:78:fc:b6:36:d3:a8:fb:ca:da:6d:fe:d8:
                    1f:11:c4:bf:68:29:fc:8f:3d:ab:f6:e9:05:28:96:
                    81:7e:46:3d:ef:0b:81:82:12:c6:74:f0:f7:1b:a2:
                    f6:89:ca:ee:7e:c7:5f:3d:fb:57:f7:d9:8a:55:87:
                    db:e8:7f:53:60:74:3f:46:c4:5a:a2:c1:99:15:de:
                    9a:4b:24:f1:5d:51:cc:7c:b4:07:e1:d5:d1:35:80:
                    6b:8a:04:23:2f:ea:13:09:ac:3b:ae:95:32:0e:e6:
                    ff:04:c7:92:38:a7:93:b8:46:e1:c2:2c:97:8d:64:
                    85:bd:05:bf:0c:cb:93:9b:f1:63:96:7f:dc:a1:ba:
                    74:88:ed:92:46:78:31:cf:58:59:55:89:ca:a5:dc:
                    63:f3:d5:06:0d:ed:e3:28:e7:7e:8b:cd:a1:97:38:
                    4f:10:05:6f:33:45:bf:19:96:4d:d3:e3:ec:b2:ef:
                    ff:1a:9e:1c:c6:94:35:76:62:dd:f6:59:9c:e2:1c:
                    ea:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:78:CE:05:87:88:54:EB:21:5C:43:08:6B:86:65:A5:53:9E:0C:D4
            X509v3 Authority Key Identifier:
                keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f6:0a:cd:2f:12:3f:5b:de:bb:9d:0b:e8:0b:00:f3:a6:d6:
         80:56:8e:ca:4b:df:a9:08:a5:9d:ec:52:fc:be:39:ac:b7:87:
         9a:ea:2e:9a:ae:e0:5e:84:09:af:db:d2:e5:07:5f:b2:e6:0b:
         b4:8f:02:9e:d0:09:74:21:73:a9:3a:fe:bb:63:f4:d1:ec:2c:
         63:c3:44:78:29:96:13:3a:f2:de:d3:6e:f8:62:69:c6:93:40:
         f5:ca:1b:1d:64:6f:0b:5a:0b:b5:6b:4e:69:44:41:31:cb:bb:
         24:d2:2c:ec:c7:69:ea:15:63:cb:11:f7:e5:e1:0a:98:52:75:
         ea:86:f4:c8:c7:49:ae:75:89:b3:97:11:be:f3:25:63:e1:5d:
         e8:05:17:db:10:b8:09:74:93:08:e2:f5:9b:97:8a:90:b0:7d:
         db:44:73:2b:b0:9a:0d:6c:52:4e:ea:ba:7c:c4:92:a9:36:a1:
         45:00:21:96:c8:82:e4:52:ea:32:ef:9a:1a:ca:0c:09:4f:e7:
         ec:01:db:dc:4e:ac:9e:ad:5a:a9:10:77:40:eb:02:75:dd:5c:
         99:5e:db:b5:5f:2d:d3:9c:85:d3:a0:69:99:ff:a4:11:90:b8:
         e6:6d:d5:1b:42:ed:7b:28:08:79:fe:6f:c1:ed:56:36:cb:1d:
         e9:66:9a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 01:47:13 2024 by rpki-client on console-fra.rpki-client.org